Privacy Policy

This Privacy Policy describes how Timerise Sp. z o.o. (“Timerise”, “We”, “Us”, or “Our”) collects, uses, discloses, and protects Your personal data when You use our Website or Services, and informs You of Your privacy rights and how the law protects You.

1. Controller

The controller of Your personal data is Timerise Sp. z o.o., with its registered seat in Wrocław, Poland, at ul. Księcia Witolda 49/15, 50-202 Wrocław, entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000895019.

2. Interpretation and Definitions

• “We”, “Us”, “Our” – refers to Timerise Sp. z o.o.
• “Country” – refers to Poland.
• “Website” – refers to https://timerise.ai
• “Services” – refers to the design, development, and delivery of custom booking systems, as defined in our Terms & Conditions.
• “Electronic Services” – refers to services provided electronically via our Website: the AI assistant chat (“Tim”), the AI Project Briefing (including the Briefing Account), and the bug report form.
• “Personal Data” – means any information that relates to an identified or identifiable natural person.
• “Usage Data” – means data collected automatically during the use of the Website or Services (e.g. IP address, browser type, session duration).
• “Cookies” – are small files placed on Your device to improve Website performance and track preferences.
• “Device” – means any device capable of accessing the Website (e.g. computer, smartphone, tablet).
• “You” – means the individual or entity using the Website, Services, or Electronic Services.

3. Types of Data Collected

Personal Data

When using our Website or Services, You may be asked to provide certain information, including:

• First and last name
• Company name (if applicable)
• Business address
• E-mail address
• Phone number
• Information You share in the AI Project Briefing, such as business requirements, project scope, timeline, and budget

Providing this information is voluntary but necessary to contact Us, prepare a project proposal, or conclude an agreement for Services or Electronic Services.

Usage Data

Usage Data are collected automatically and may include:

• IP address, browser type, and version
• Pages visited, time and date of visits, time spent on pages
• Device type, operating system, screen resolution, and language
• Diagnostic and performance data

We also process Your IP address for security purposes, such as rate limiting of the sign-in and bug report features.

4. AI Assistants and Project Briefing

Our Website offers AI-powered chat features: the public assistant “Tim” and the AI Project Briefing available after signing in. When You use them:

• The content of Your conversation is processed by our AI model provider, Google (Gemini models), acting as our processor, solely to generate responses. We do not permit our AI providers to use Your conversations to train their models.
• Information You provide in the AI Project Briefing (e.g. contact details, company information, project requirements, timeline, and budget) is stored in our database so that We can prepare Your architecture blueprint and proposal, and may be shared with our team via internal communication tools (Slack).
• Please do not share special categories of personal data (e.g. health data) or other sensitive information in chat conversations; it is not required to use our Services.

5. Sign-In (Briefing Account)

Access to the AI Project Briefing uses passwordless authentication: You provide Your e-mail address and receive a one-time sign-in link (magic link). Authentication and account data are handled by our infrastructure provider Supabase, acting as our processor. We do not offer or use social media logins.

6. Cookies, Analytics and Tracking Technologies

We use Cookies and similar technologies to operate and analyze our Website. On Your first visit, a consent banner lets You accept or reject non-essential categories (functional, analytics, marketing). You can change Your choice at any time and manage or disable Cookies in Your browser settings:

• Chrome
• Firefox
• Safari
• Edge

We use the following analytics and marketing tools:

• Google Analytics (Google Ireland Limited, Dublin, Ireland) – for statistical and performance purposes. Learn more at: https://policies.google.com/privacy
• Vercel Analytics (Vercel Inc.) – privacy-friendly, aggregated Website performance and traffic statistics.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) – marketing analytics and conversion measurement. Learn more at: https://www.linkedin.com/legal/privacy-policy

7. Purposes and Legal Bases of Processing

We process Your Personal Data for the following purposes and legal bases:

• Service Provision: To scope, prepare, and deliver custom booking system projects. Legal basis: Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• Contact & Communication: To respond to inquiries sent via e-mail or the AI assistants. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Marketing: To send newsletters or offers (if You opted in). Legal basis: Consent (Art. 6(1)(a) GDPR) or Legitimate interest (Art. 6(1)(f) GDPR).
• Analytics & Improvement: To analyze usage and improve the Website. Legal basis: Consent (Art. 6(1)(a) GDPR) for non-essential cookies; Legitimate interest (Art. 6(1)(f) GDPR) otherwise.
• Security: To protect the Website against abuse (e.g. rate limiting). Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Legal Compliance: To comply with legal obligations (e.g. tax laws). Legal basis: Legal obligation (Art. 6(1)(c) GDPR).

8. Access to Personal Data

Your data may be shared only with:

• Entities providing hosting and infrastructure (Vercel, Supabase, Google Cloud), e-mail delivery (SendGrid/Twilio), AI model processing (Google), and internal communication (Slack).
• IT service providers, accounting, and legal partners bound by confidentiality.
• Analytics and marketing providers listed in Section 6, according to Your consent.
• Public authorities when legally required.

All processors act under written agreements consistent with GDPR.

9. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes described:

• Contractual data – until the contract ends and limitation periods expire;
• Data processed on the basis of legitimate interest – until You object or the purpose ceases;
• Data processed on the basis of consent – until consent is withdrawn;
• Data processed under legal obligation – for the period required by law.

After these periods, data are securely deleted or anonymized.

10. Data Transfers Outside the EEA

We prioritize service providers offering data storage within the EU/EEA. Where transfers outside the EEA are necessary (e.g. services provided by Vercel, Google, SendGrid, Slack, or LinkedIn), they are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission, or
• Adequacy decisions confirming adequate data protection standards.

11. Your Rights

You have the right to:

• access Your data (Art. 15 GDPR),
• rectify inaccurate data (Art. 16 GDPR),
• erase data (“right to be forgotten”, Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• receive data in portable format (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent at any time (Art. 7(3) GDPR).

You may also file a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

12. Security of Personal Data

We apply appropriate technical and organizational measures to protect Your data, including encryption, access control, and monitoring systems.

However, please note that no method of transmission or storage is 100% secure, and absolute security cannot be guaranteed.

13. Children’s Privacy

Our Website and Services are not directed to persons under the age of 13.

We do not knowingly collect data from children.

14. Links to Other Websites

Our Website may contain links to third-party sites, including the external scheduling tool we use for booking calls.

We are not responsible for the privacy practices or content of such sites.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Changes become effective upon publication on this page.

Significant updates will be communicated via e-mail or Website notice.

16. Contact

If You have questions or concerns about this Privacy Policy or Your data, contact:

© 2026 Timerise Sp. z o.o. – All rights reserved.